5.7
Moyenne
CVE-2026-21529 Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an…
Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an authorized attacker to perform spoofing over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure HDInsight 1.0 | 1.0 → < 5.1 | 5.1 |
Références
- Azure HDInsight Spoofing Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Azure HDInsight
Les 12 CVE de Azure HDInsight →
CVE-2026-85891
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to…
7.5
Élevée
CVE-2026-81349
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an…
7.2
Élevée
CVE-2024-21330
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
7.8
Élevée
CVE-2023-36419
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
8.8
Élevée